From b6b07d1d98878cb90aff4cddbcbe860d6b71d285 Mon Sep 17 00:00:00 2001 From: Nick Mathewson Date: Mon, 29 Nov 2004 20:39:55 +0000 Subject: [PATCH] Remove needless -2 in log code. This was not an underflow risk, sinze we only call format_msg from one place, where buf_len==10024 svn:r3017 --- src/common/log.c | 16 ++++++++++++---- 1 file changed, 12 insertions(+), 4 deletions(-) diff --git a/src/common/log.c b/src/common/log.c index 82211c98c9..06d333b41a 100644 --- a/src/common/log.c +++ b/src/common/log.c @@ -139,10 +139,18 @@ static INLINE char *format_msg(char *buf, size_t buf_len, r = tor_vsnprintf(buf+n,buf_len-n,format,ap); if (r < 0) { - n = buf_len-2; /* XXX is this line redundant with the -=2 above, - and also a source of underflow danger? */ - strlcpy(buf+buf_len-TRUNCATED_STR_LEN-1, TRUNCATED_STR, - buf_len-(buf_len-TRUNCATED_STR_LEN-1)); + /* The message was too long; overwrite the end of the buffer with + * "[...truncated]" */ + if (buf_len >= TRUNCATED_STR_LEN) { + /* This is safe, since we have an extra character after buf_len + to hold the \0. */ + strlcpy(buf+buf_len-TRUNCATED_STR_LEN, TRUNCATED_STR, + buf_len-(buf_len-TRUNCATED_STR_LEN-1)); + } + /* Set 'n' to the end of the buffer, where we'll be writing \n\0. + * Since we already subtracted 2 from buf_len, this is safe.*/ + n = buf_len; + } else { n += r; }